Storage Brimsdown Privacy Policy
This Privacy Policy explains how Storage Brimsdown collects, uses, stores and shares personal data relating to our self‑storage and related services. It applies to all Storage Brimsdown customers in our service area, as well as prospective customers, former customers and visitors who interact with us online or offline.
We are committed to protecting your privacy and handling your personal data in a transparent and secure manner in accordance with the United Kingdom General Data Protection Regulation and the Data Protection Act 2018.
Who This Policy Applies To
This Privacy Policy applies to all individuals who use or enquire about Storage Brimsdown facilities or services in our area. This includes customers renting units or spaces, payers on an account, authorised contacts, emergency contacts, guarantors, visitors to our sites, and individuals who contact us for information or make a complaint.
Personal Data We Collect
We may collect and process the following categories of personal data when you interact with Storage Brimsdown or use our services:
Identification and contact details such as name, postal address, billing address, date of birth, and any identification documents and reference numbers presented to us in person or electronically.
Contact information such as email address, postal address and any communication preferences you share with us.
Account and contract details such as customer reference numbers, storage unit numbers, contract start and end dates, payment terms, and communication relating to your account or tenancy.
Payment and transaction information such as payment history, amounts paid, method of payment, recurring payment instructions and invoices generated for your account. We do not store full payment card details, but payment processors may process such data on our behalf.
Security and access data such as CCTV footage recorded on our sites, vehicle registration numbers where captured by cameras or provided to us, access control data such as key codes or access logs, and records of visits to our premises.
Communication records such as emails, letters, contact forms, and any notes we make in relation to enquiries, complaints or support requests.
Marketing and preference information such as your consent to receive marketing communications from Storage Brimsdown and details of your preferences or responses to campaigns if you provide them.
How We Collect Personal Data
We collect personal data directly from you when you contact us, visit our premises, sign a contract, create or manage your account, make a payment, or otherwise use our services. We may also receive data indirectly from third parties, for example credit reference agencies, payment service providers, or law enforcement where legally permitted.
Lawful Bases for Processing
We process personal data only where we have a lawful basis under data protection law. Depending on the context, we rely on the following lawful bases:
Contract performance. We process personal data to enter into and perform a contract with you, including assessing your application, setting up and managing your account, providing access to storage facilities, handling payments and providing customer service.
Legal obligation. We process personal data where required to comply with legal and regulatory requirements, for example obligations relating to tax, accounting, record keeping, prevention of fraud and crime, and responding to requests from law enforcement or regulatory authorities.
Legitimate interests. We process personal data where it is necessary for our legitimate business interests or those of a third party, and where your interests and fundamental rights do not override those interests. This includes ensuring the safety and security of our premises and customers, operating and improving our services, managing and recovering debts, and defending legal claims.
Consent. In some circumstances we rely on your consent, for example for certain types of direct marketing communications or when you ask us to share data with a third party not otherwise involved in providing our services. Where we rely on consent, you have the right to withdraw it at any time.
Purposes of Processing
We use your personal data for the following purposes:
To provide and manage storage and related services, including setting up your account, administering your contract, providing access credentials, and communicating with you about your unit and any relevant service changes.
To process payments and manage billing, including issuing invoices, collecting payments, processing refunds where applicable, and dealing with payment queries.
To maintain safety and security, including operating CCTV systems on our sites, controlling access to storage facilities, investigating incidents or complaints, and assisting law enforcement where legally required.
To manage our business operations, including auditing, quality control, reporting, staff training, and improving our services and customer experience.
To comply with our legal and regulatory obligations, including record retention, responding to lawful requests from public authorities, and fulfilling tax and accounting requirements.
To communicate with you about your account, contract renewals, service updates, and where permitted, to send you information about services that may be of interest to you.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet any legal, accounting or reporting requirements.
Customer account and contract information is generally kept for a period after your contract ends to enable us to respond to queries, manage any disputes, and comply with legal obligations. Payment records and invoices are kept for the period required under tax and accounting laws.
CCTV footage and access control logs are retained for a limited period that is appropriate for security purposes, typically only as long as required to investigate incidents or respond to reasonable requests from authorities.
Where we rely on consent for marketing, we retain your contact details and preference records for as long as you remain opted in or until we determine that they are no longer accurate. You can opt out of marketing at any time.
When personal data is no longer required, we will securely delete or anonymise it so that it can no longer be associated with you.
Data Processors and Sharing
We may share your personal data with carefully selected third parties who act as data processors on our behalf. These service providers are engaged under written contracts that require them to process personal data only in accordance with our instructions and to apply appropriate security measures.
Examples of such processors include payment processing providers that handle card or direct debit payments, information technology and cloud service providers that host our systems and data, document storage and destruction services, security and access control system providers, and professional advisers such as accountants or legal advisers to the extent necessary for the services they provide to us.
We may also share personal data with third parties acting as independent controllers where required by law or where necessary to protect our rights or the rights of others. This may include law enforcement agencies, regulatory authorities, courts, and credit reference or debt collection agencies in connection with unpaid debts or fraud prevention.
We do not sell your personal data to third parties.
International Transfers
Where any of our service providers or their systems are located outside the United Kingdom or the European Economic Area, we take steps to ensure that your personal data is afforded an equivalent level of protection. This may include using standard contractual clauses approved for international data transfers or relying on other appropriate safeguards as permitted by data protection law.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights are subject to certain conditions and exemptions.
Right of access. You can request confirmation of whether we process your personal data and obtain a copy of that data along with certain information about how it is processed.
Right to rectification. You can ask us to correct or complete personal data that is inaccurate or incomplete.
Right to erasure. In certain circumstances you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing.
Right to restriction. You can ask us to restrict the processing of your personal data in certain situations, for example while we verify the accuracy of the data or consider an objection you have raised.
Right to object. You can object to processing based on our legitimate interests where you believe your rights and interests outweigh our grounds for processing. You also have an absolute right to object to direct marketing.
Right to data portability. In certain cases you can request that we provide your personal data in a structured, commonly used and machine‑readable format, or ask us to transmit it to another controller where technically feasible.
Right to withdraw consent. Where we rely on consent as the lawful basis for processing, you can withdraw your consent at any time. This will not affect the lawfulness of processing before consent was withdrawn.
You also have the right to lodge a complaint with a supervisory authority if you are concerned about how your personal data is being handled.
Security of Your Personal Data
We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction or damage. These measures include access controls, secure storage, staff training, and regular review of our security practices. While we strive to protect your personal data, no system can be completely secure, and we cannot guarantee absolute security.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or the services we offer. Any significant changes will be highlighted by updating the date and, where appropriate, by informing you through our usual communication channels. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.
